Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a4e413e7-dbc2-3a89-a2fa-c635bacba5e7.roa
File:                     a4e413e7-dbc2-3a89-a2fa-c635bacba5e7.roa (raw, json)
Hash identifier:          DQ5h8DB64taF6Gy6hVnSc4EvOyIkWPwsIlwmGC1Sc5Y=
Subject key identifier:   DA:66:B9:69:11:65:95:0C:ED:07:69:36:45:56:D1:14:E8:9D:47:8B
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CFF4CD6E52B6393F73118E8C0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a4e413e7-dbc2-3a89-a2fa-c635bacba5e7.roa
Signing time:             Fri 27 Feb 2026 02:00:31 +0000
ROA not before:           Fri 27 Feb 2026 02:00:31 +0000
ROA not after:            Thu 28 May 2026 01:00:31 +0000
asID:                     46925
IP address blocks:        153.33.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ff:4c:d6:e5:2b:63:93:f7:31:18:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb 27 02:00:31 2026 GMT
            Not After : May 28 01:00:31 2026 GMT
        Subject: CN=c0f58b86-0176-436e-a31a-db86314d661e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fd:ec:70:c5:36:3b:5e:19:54:5f:3d:d4:23:
                    ab:89:a4:06:b4:eb:52:0b:71:2d:4c:aa:44:0b:9c:
                    f6:16:b9:03:ab:a1:9e:e2:cc:51:ab:af:89:0e:6d:
                    10:e6:ca:21:b6:9f:16:cf:da:ba:a0:b1:70:61:41:
                    ab:c3:68:e5:bf:24:8b:e0:94:c7:7a:dd:fc:90:85:
                    87:47:c1:70:7d:c8:8a:48:df:d8:fe:c3:1d:56:9e:
                    93:30:da:c7:cc:9c:9e:e8:0d:aa:e0:39:9c:66:59:
                    1f:e9:16:06:01:47:bc:19:b9:37:cc:cd:c9:2e:e2:
                    1f:be:79:91:c6:46:99:6d:78:b6:12:96:50:c7:53:
                    1c:a2:1f:86:6a:bd:11:3c:cb:b2:61:cc:77:e7:c4:
                    2d:d3:85:ab:06:dc:62:34:f5:e0:dd:e4:1d:5a:c4:
                    c8:9d:60:d8:05:72:ef:59:c7:31:94:26:76:77:81:
                    96:73:9a:1a:a1:31:20:3a:b8:c9:dc:5d:a8:9e:74:
                    7d:f1:77:f6:df:07:89:5e:65:4e:b8:4f:04:d7:30:
                    38:0a:f7:87:1b:f2:fa:ee:fb:0b:d8:13:0a:47:ed:
                    d9:12:da:20:d8:87:c7:f0:15:2f:1c:cf:63:66:4a:
                    86:4e:92:57:48:9b:9c:62:d2:19:fd:6c:aa:c0:73:
                    03:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:66:B9:69:11:65:95:0C:ED:07:69:36:45:56:D1:14:E8:9D:47:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a4e413e7-dbc2-3a89-a2fa-c635bacba5e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:9a:53:a2:69:c4:46:56:9c:6f:13:f5:aa:05:22:7c:a2:e5:
         a9:dc:1d:cd:4d:f0:a9:71:5d:2d:23:70:07:1a:6e:87:92:90:
         c3:44:5b:18:cb:98:aa:b7:a7:26:77:1d:5b:13:2b:ec:7f:41:
         5c:cb:79:18:ed:03:71:78:65:3f:96:e1:99:93:a1:3d:11:79:
         bd:5c:c7:70:fd:80:97:48:43:2c:82:9c:a3:7d:4f:41:92:8c:
         81:a1:15:af:c1:20:52:3c:b1:2a:8d:f3:7e:03:70:81:02:93:
         1c:df:a3:7a:ce:ca:34:eb:e0:d3:57:66:56:81:1f:a2:91:12:
         77:a3:2a:c7:58:ad:53:5d:d7:8a:02:6c:aa:63:75:5d:b3:62:
         63:3b:2a:8b:4d:e2:45:95:c8:08:14:65:92:c0:75:de:49:ad:
         05:cf:6b:63:25:75:dd:64:e7:ca:3f:a0:78:02:4e:94:b0:a8:
         61:05:31:5d:10:cf:48:5d:92:20:2e:d7:bf:0d:81:ad:f4:ba:
         81:85:75:ae:f7:2b:0e:88:41:74:c1:4a:a8:08:ab:5b:b8:3f:
         87:53:66:e2:85:75:cb:9f:d8:38:c4:26:2c:b3:56:eb:6e:01:
         17:db:eb:3d:cc:19:34:7d:a2:39:b8:56:4b:e4:61:dd:63:cc:
         de:22:f3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:15 2026 by rpki-client